Change SSL settings

To perform this procedure, you need to be able to display the contents of the SSL certificate and key files that you want to install on the Control Center master host, and you need a copy of the root certificate file (rootCA.pem). In addition, Zenoss recommends logging in to the master host through SSH, rather than the hypervisor console, so that you can copy and paste content.
This option allows you to provide new content for SSL certificate and key files.
  1. Gain access to the Control Center host, through the console interface of your hypervisor, or through a remote shell utility such as PuTTY.
  2. Log in as the root user.
  3. Use the Down Arrow key to select Change SSL settings, and then press Enter.
  4. When you are ready to add the contents of your SSL certificate and key files to the Control Center master host, press Enter.
  5. Press Enter.
    The Appliance Administration menu is replaced with the nano text editor.
  6. Enter the contents of your SSL key file, and then save the file and exit the editor.
    1. Press Ctrl-O.
    2. Press Ctrl-X.
    3. Press y, and then press Enter.
  7. Press Enter.
    The Appliance Administration menu is replaced with the nano text editor.
  8. Enter the contents of your SSL certificate file, and then save the file and exit the editor.
    1. Press Ctrl-O.
    2. Press Ctrl-X.
    3. Press y, and then press Enter.
  9. Restart the Control Center daemon (serviced) now or later.
    Restarting serviced pauses Zenoss Core services briefly.
    • To restart serviced now, press Enter.
    • To restart serviced later, press Tab to select No, and then press Enter.
  10. Install the root certificate into browser clients.
    The procedures for installing a root certificate into a browser client varies by browser and client operating system. For more information, refer to your browser documentation or articles such as this one.